CVSS
8.6
CVSS v4.0
EPSS
0.2%
Exploit Prediction Score
Published
August 7, 2026
Exploitability
EPSS probability 0.2%
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.
No package data available.
Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).